Using an ISDN Router to dial in another router that requires RADIUS
I am trying to use a Cisco 800 series ISDN router that I have at home to dial into the network at work. The router here is a Shiva that is configured to pass authentication to a Radius server.
How should I configure my router at home? I have not specified a ppp authentication method on my dialer interface but I am not sure where I should specify the username and password to send to the Shiva...
Re: Using an ISDN Router to dial in another router that requires
The good news is that the config for your local 800 is pretty straightforward. You don't have to add any AAA or radius commands to the 800, since only the Shiva talks directly to the radius server.
For this example, we will assume that your radius username is george, and the radius password is apple. On the 800, if you have a dialer interface, you would add these commands there. If you have no dialer interface in the config, then you would instead add these commands to the bri interface:
ppp authentication pap ms-chap chap
ppp chap hostname george
ppp chap password apple
ppp pap sent-username george password apple
That should do the trick. If you happen to have the username and password that the Shiva router will use to identify itself, then you should add this to the 800 config as well. In this example we will say the Shiva will identify itself with hostname/username jack and password jill. At global config in the 800, you would add:
username jack password jill
In order to avoid some really interesting authentication issues, you should add your own username and password in the same way, also at global config:
username george password apple
You may not need to enter either of those "username xxx password yyy" statements into the config for this to work; it depends on exactly how it is implemented. If you do not see a successful connection, on your 800 run the debug of "debug ppp authentication." This will tell you if you are failing authentication specifically.
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...